Privacy Policy

Effective date: May 4, 2026 | Website: bharp.org

1. Who We Are

The Behavioral Health Alliance of Rural Pennsylvania (“BHARP,” “we,” “our,” or “us”) is a Pennsylvania non-profit corporation that supports behavioral health providers serving rural communities across the Commonwealth.

Data Controller
Behavioral Health Alliance of Rural Pennsylvania (BHARP)
301 Science Park Rd, Suite #308
State College, PA 16803
Phone: 814-826-2952
Website: https://bharp.org

This Privacy Policy explains what personal information we collect when you visit bharp.org, how we use it, and your rights in relation to it. By using our website you agree to the practices described here.

2. Information We Collect

2.1 Information You Provide Directly

When you complete a form on our website (such as the general contact form, member feedback form, or compliance issue reporting form), we collect the information you submit, which may include:

Your name
Email address
Phone number
Preferred contact method
The subject and body of your message

Providing this information is voluntary. You choose what to share with us.

2.2 Information Collected Automatically

When you visit our website, certain data is collected automatically through cookies and similar technologies, including:

Usage data: pages visited, time spent on pages, links clicked, scroll depth, and navigation path through the site
Device & browser data: browser type and version, operating system, screen resolution, and device type (desktop, mobile, tablet)
Network data: IP address, approximate geographic location (city/region level) derived from IP address, and referring URL
Interaction data: events such as form completions, video plays, and button clicks

This data is primarily collected by third-party analytics and tracking tools described in Section 4.

3. How We Use Your Information

To respond to your inquiries. When you submit a contact form, we use your information to follow up and answer your questions.
To understand how the site is used. Analytics data helps us identify which content is most useful, where visitors encounter difficulties, and how to improve the site experience.
To operate site features. Services such as embedded maps, video players, and the translation widget rely on third-party providers to function.
To protect the site from abuse. Anti-spam and bot-detection tools help keep our contact forms secure.
To manage tag and tracking configuration. Google Tag Manager allows us to deploy and update analytics and marketing tags without modifying site code.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4. Third-Party Services & Technologies

Our website relies on the following third-party services. Each provider may collect data as described below. We encourage you to review their individual privacy policies for full details.

Google Analytics 4

Provider: Google LLC (USA)
Measures website traffic, user behaviour, and engagement. Sets cookies to distinguish unique visitors and track sessions. Data is sent to Google’s servers and may be stored in the United States.
Google Privacy Policy | Analytics opt-out add-on

Google Tag Manager

Provider: Google LLC (USA)
A tag management system used to deploy and manage analytics and tracking scripts. GTM itself does not collect personal data, but it may load other tools that do.
Google Privacy Policy

Google Fonts

Provider: Google LLC (USA)
Provides web fonts (Montserrat and Mulish) loaded from Google’s servers. When a font is loaded, your browser’s IP address is transmitted to Google. Google states that font requests do not set cookies and are not used to build user profiles.
Google Fonts Privacy FAQ

Google Maps

Provider: Google LLC (USA)
An interactive map is embedded on our Contact page to display our office location. Loading the map transmits your IP address and browser information to Google and may set cookies.
Google Privacy Policy

Google Translate

Provider: Google LLC (USA)
A translation widget is present on every page of our site, allowing visitors to view content in their preferred language. Loading the widget transmits your IP address to Google and may set cookies.
Google Privacy Policy

Google reCAPTCHA

Provider: Google LLC (USA)
Used to protect our contact forms from spam and automated abuse. reCAPTCHA analyses user behaviour and browser signals to determine whether a form submission is human. This may involve setting cookies and sending data to Google.
Google Privacy Policy

Vimeo

Provider: Vimeo, Inc. (USA)
Video content on our site is hosted and delivered by Vimeo. When you watch an embedded video, Vimeo may collect your IP address, device information, and viewing activity. If you are logged into a Vimeo account, Vimeo may associate this data with your account.
Vimeo Privacy Policy

Contact Forms (Gravity Forms)

Provider: Rocketgenius, Inc. (USA)
Our contact forms are powered by Gravity Forms, a WordPress plugin. Form submissions (name, email, phone, and message) are stored in our WordPress database on our web server. We access these submissions solely to respond to your inquiry.
Gravity Forms Privacy Policy

Note on Google services: Several features on this site use Google services (Analytics, Tag Manager, Fonts, Maps, Translate, reCAPTCHA). Google may combine data collected through these services with information it holds from other sources. For more information, see How Google uses data from sites that use its services.

5. Cookies & Similar Technologies

Cookies are small text files stored on your device by your browser. Our website uses both first-party cookies (set by bharp.org) and third-party cookies (set by the services listed in Section 4).

5.1 Cookies Used on This Site

Cookie / Service	Type	Purpose	Typical Duration
_ga, _ga_*	Analytics (Google)	Distinguish unique visitors and track sessions for Google Analytics 4	2 years
_gid	Analytics (Google)	Distinguish users for Google Analytics	24 hours
_gcl_au	Advertising (Google)	Tracks ad conversions via Google Tag Manager	3 months
NID, CONSENT, SOCS	Functional (Google)	Google Maps and other Google service preferences	6 months – 2 years
googtrans	Functional (Google)	Stores the visitor’s selected language in the Google Translate widget	Session / 1 year
vuid	Analytics (Vimeo)	Tracks Vimeo video usage statistics	2 years
WordPress session cookies	Functional (1st party)	Maintains login state for members who log in to the site	Session / 14 days

5.2 Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or be notified when a cookie is set. Note that disabling certain cookies may affect the functionality of parts of this site.

To opt out of Google Analytics tracking specifically, you can install the Google Analytics Opt-out Browser Add-on. For general information on managing cookies, visit allaboutcookies.org.

6. Data Sharing & Disclosure

We do not sell or rent your personal information. We share data only in the following limited circumstances:

Service providers: The third-party services described in Section 4 receive data as part of providing their services to us. Each is bound by its own privacy policy and data processing terms.
Legal obligations: We may disclose information if required to do so by law or in response to a valid subpoena, court order, or government request.
Protection of rights: We may share information when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of BHARP, our members, or the public.
Organisational transfers: In the unlikely event of a merger, acquisition, or dissolution of BHARP, personal data may be transferred as part of that transaction, subject to equivalent privacy protections.

7. Data Retention

Contact form submissions are retained for as long as required to respond to and resolve your inquiry, and thereafter for a reasonable administrative period, typically no longer than 3 years.
Analytics data in Google Analytics is retained in accordance with the retention settings we have configured (typically 14 months) and Google’s own retention policies.
Cookies expire according to the durations set out in Section 5.

When personal data is no longer needed, we delete or anonymise it.

8. Security

We take reasonable technical and organisational measures to protect the personal information we hold against accidental loss, unauthorised access, disclosure, alteration, or destruction. Our website is served over HTTPS (encrypted connections) and our hosting environment incorporates standard security controls.

However, no method of internet transmission or electronic storage is completely secure. We encourage you not to submit sensitive personal or financial information through our contact forms.

9. Children’s Privacy

Our website is intended for adults, including healthcare professionals, organisations, and individuals seeking information about behavioural health services. We do not knowingly collect personal information from children under the age of 13. If you believe a child has submitted personal information to us, please contact us and we will take prompt steps to delete it.

10. Your Privacy Rights

Depending on where you are located, you may have certain rights regarding your personal data, including:

Access: Request a copy of the personal data we hold about you.
Correction: Ask us to correct inaccurate or incomplete information.
Deletion: Request that we delete your personal data, subject to any legal or operational retention requirements.
Objection / Restriction: Object to or ask us to restrict certain processing of your data.
Data portability: Where applicable, request that we provide your data in a structured, commonly used format.
Withdraw consent: Where processing is based on your consent, withdraw that consent at any time (this does not affect the lawfulness of prior processing).

To exercise any of these rights, please contact us using the information in Section 12. We will respond within a reasonable time frame and may need to verify your identity before fulfilling a request.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. When we make material changes, we will update the Effective Date at the top of this page. We encourage you to review this policy periodically. Your continued use of bharp.org after any update constitutes your acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have a concern about how we handle your personal data, please contact us:

Behavioral Health Alliance of Rural Pennsylvania (BHARP)
301 Science Park Rd, Suite #308
State College, PA 16803
Phone: 814-826-2952
Contact form: bharp.org/about-us/contact-bharp/